下載物

显示全部楼层 · 发表于 2008-6-24 20:17:41

原体:
http://bbs.kafan.cn/viewthread.php?tid=274983

已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.boo 檔案: C:\Documents and Settings\kato9096\桌面\e21.exe2//data0002
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Agent.dhj 檔案: C:\Documents and Settings\kato9096\桌面\msn.exe3//data0004
已刪除: 特洛伊木馬程式 Trojan-Clicker.Win32.Agent.amu 檔案: C:\Documents and Settings\kato9096\桌面\msn.exe3//data0005

不报的已上报.

[ 本帖最后由 kato9096 于 2008-6-24 20:19 编辑 ]

显示全部楼层 · 发表于 2008-6-24 20:22:38

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Clicker.Win32.Delf.na

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.50.10

显示全部楼层 · 发表于 2008-6-24 20:34:15

显示全部楼层 · 发表于 2008-6-24 21:40:33

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\6'
C:\Documents and Settings\Administrator\桌面\6\e21.exe2
   [DETECTION] Contains detection pattern of the dropper DR/BHO.BOO.2
   [NOTE]    A backup was created as '4891f938.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\6\msn.exe3
   [DETECTION] Contains detection pattern of the dropper DR/Agent.dhj
   [NOTE]    A backup was created as '48cef979.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\6\my8848.exe2
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    A backup was created as '4898f980.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年6月24日  21:39
Used time: 00:03 min

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   3 files were deleted
   0 files were repaired
   3 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   0 Archives were scanned
   0 Warnings
   3 Notes

25056614    51edm.exe2    171.25 KB    UNDER ANALYSIS
25056615    ggcg.exe3    203.61 KB    UNDER ANALYSIS
25056616    winxp1.exe3    56.16 KB    UNDER ANALYSIS

显示全部楼层 · 发表于 2008-6-25 22:05:48

Hello,

51edm.exe_ - not-a-virus:AdWare.Win32.Cinmus.kid,
winxp1.exe_ - not-a-virus:AdWare.Win32.Agent.dov

These files are Advertizing Tools, theirs detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

ggcg.exe_ - Trojan-Clicker.Win32.Agent.avv

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

my8848.exe_ - Trojan-Downloader.Win32.Agent.uji

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-6-25 22:08:40

[病毒样本] 下載物

本帖子中包含更多资源

23/3

本帖子中包含更多资源